co.dockai/mcp
v0.1.0Discover MCP endpoints for real-world entities by resolving business domains.
7
Total
1
Critical
2
High
4
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
6: .eggs/
7: .vercel
>>> 8: .envReport false positiveDecoded base64 content: ��^��'��m��-��%
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��b~'�*'��h�T^��m
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
214: if (data.jsonrpc === "2.0") {
215: if (data.id && pendingRequests.has(data.id)) {
>>> 216: const handlers = pendingRequests.get(data.id);
217: pendingRequests.delete(data.id);
218: Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
24:
25: # MCP Server Card (SEP-1649)
>>> 26: # https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1649
27: SERVER_CARD = {
28: "$schema": "https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 26, 2026 | critical | 7 | 28 | 0.00s |
| Feb 24, 2026 | critical | 7 | 28 | 0.00s |